Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error reading image in Volatility #22

Open
Kwise99 opened this issue Oct 24, 2017 · 2 comments
Open

Error reading image in Volatility #22

Kwise99 opened this issue Oct 24, 2017 · 2 comments

Comments

@Kwise99
Copy link

Kwise99 commented Oct 24, 2017

After pulling and saving a lime file. I am unable to read it in Volatility. I can save the image successfully to an S3 bucket and import the file to my volatility workstation. When trying to read the image I receive an error similar to
ERROR : volatility.debug : This command does not support the profile Linux4_4_0-1022x64

I am able to successfully read the same kernel image and Profile when taking the image directly from Lime.

@Kwise99
Copy link
Author

Kwise99 commented Oct 24, 2017

This seem to only happen if I stream the image to an s3 bucket. When I saved file locally and then just copied to S3 everything worked when reading in Volatility

@andrewkrug
Copy link
Member

@Kwise99 I'll have to do some debugging on this to see why multi-part upload is changing the net result. I've had success loading these in rekall but not in volatility.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants